ci(publish): use npm trusted publishers with OIDC

.github/workflows/publish.yml

@@ -4,6 +4,10 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -15,7 +19,7 @@ jobs:
     - name: Setup Node.js
       uses: actions/setup-node@v6
       with:
-        node-version: 20
+        node-version: 22
         cache: 'npm'
         registry-url: 'https://registry.npmjs.org'
 
@@ -30,5 +34,3 @@ jobs:
 
     - name: Publish to npm
       run: npm publish --access public
-      env:
-        NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-lab/ndt7",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "description": "NDT7 client for measuring networks",
   "main": "src/ndt7.js",
   "scripts": {
@@ -13,7 +13,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "github.com/m-lab/ndt7-js"
+    "url": "https://github.com/m-lab/ndt7-js"
   },
   "keywords": [
     "network",

src/ndt7.js

@@ -17,7 +17,7 @@
   const ndt7 = (function() {
     const staticMetadata = {
       'client_library_name': 'ndt7-js',
-      'client_library_version': '0.1.0',
+      'client_library_version': '0.1.3',
     };
     // cb creates a default-empty callback function, allowing library users to
     // only need to specify callback functions for the events they care about.